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What is claimed is: 

1 A method of handling network packets, 

2 comprising^ 

3 receiving encrypted network packets from the network 

4 at a network interface computer; and 

5 passing ufae encrypted network packets to a computer 

6 on an internal network. 

1 2. The mettrod of claim 1, further comprising, 

2 before passing the encrypted network packets to the computer 

3 on the internal netwo: 

4 determining a destination computer for each 

5 encrypted network packe 

1 3. The method of\claim 2, wherein determining 

2 further includes: 

3 determining whether\a source computer that sent each 

4 encrypted network packet is \authorized to send encrypted 

5 network packets to the destination computer. 

1 4. The method of clad^n 2, wherein determining 

2 includes: 

3 examining a field in a h\ader of the network packet. 

1 5. The method of claim 4, wherein the field 

2 corresponds to a virtual network tunnel. 

1 6. TRhe method of claim 2, wherein an encrypted 

2 network packetNis passed to the computer on the internal 

3 network when the ^destination computer for the encrypted 

4 network packet is o^fermined to be the computer on the 

5 internal network. 

1 7. The method of claim 1, further comprising: 

2 decrypting an encrypted network packet at the 

3 network interface computer when the destination computer for 

4 the encrypted network packet iss determined to be the network 

5 interface computer. 

1 8. The method of claim 7,\further comprising: 
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2 \jbassing the decrypted network packet to the ■ computer 

3 on the internal network. 

1 9. Vrhe method of claim 1, further comprising: 

2 encrVpting network packets; and 

3 sending encrypted network packets from the network 

4 interface computer to the network. 

1 10. Thei method of claim 9, wherein the computer on 

2 the internal network encrypts the network packets, and 

3 further comprising 

4 passing the \ncrypted network packets to the network 

5 interface computer. 

1 11. The method of claim 1, wherein the network 

2 interface computer comprises a firewall computer. 

1 12. The method of claim 1, wherein the network 

2 comprises a public network. 

1 i<3. A method of handling network packets, 

2 comprising 

3 recei^smg encrypted network packets at a first 

4 computer over aNnetwork from a second computer; 

5 examining a. fdyefrd in each network packet to 

6 determine which of aNjjdyrality of encryption algorithms was 

7 used to encrypt the neuwork packet; and 

8 decrypting the network packet in accordance with the 

9 determined encryption algorithm. 

1 T ^ e met hod of claim 13, further comprising: 

2 examo^F^ng the field to determine a destination 

3 computer for eachvgncrypted network packet . 

1 15. The method of claim 14, further comprising: 

2 determining whether a source computer that sent each 

3 encrypted network packet is authorized to send encrypted 

4 network packets to the destination computer. 

1 16. The method of claim 14, further comprising: 
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2 passing encrypted network packets to a computer on 

3 an internal network when the destination computer is 

4 determined to be the computer on the internal network. 

1 17. The method of claim 14, further comprising: 

2 decrypting network packets when the destination 

3 computer is determined to be the first computer. 

1 18. The method of claim 17, further comprising: 

2 passing the decrypted network packets to a computer 

3 on an internal network. ^ij 

1 19-^S^The method of claim wherein the field 

2 corresponds toVavirtual network ^mnel . 

1 20. The method of claim >s, wherein the network 



2 comprises a public ri^work. ^ 

1 21. The methodN©f claim J#, wherein the first 

2 computer comprises a firewall computer. 

1 ^2. A method of handling network packets, 

2 comprising^ 

3 receiving network packets sent over a network; 

4 determining which virtual tunnel each network packet 

5 was sent over ; an) 

6 routing eacfiVnetwork packet to a destination 

7 computer in accordanc^ with the determined virtual tunnel . 

1 23. The method of claim 22, further comprising: 

2 decrypting each network packet in accordance with 

3 the determined virtual tunnel . 

1 "S<4. A method of handling network packets, 

2 comprising: 

3 encrypft^ng network packets at a computer connected 

4 to an internal network; 

5 passing the ehorypted network packet over the 

6 internal network to a pbfclic network interface computer; and 

7 passing the encrypued network packet over a public 

8 network connected to the network interface computer. 
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\25 . A method of handling network packets, 
comprising : 

receiving network packets sent over a network; 

determining which virtual tunnel each network packet 
was sent over;^^nd 

determining whether a source computer that sent each 
network packet is authorized to send network packets to over 
the determined virtualVtunnel . 

26. The method of claim 25, further comprising: 

routing each network packet to a destination 
computer in accordance with the determined virtual tunnel 
when the source computer is determined to be authorized. 
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